Company Access Permissions

This article outlines what permissions you can customize on a company level.

With GoCo's new advanced permissions you'll not only have the ability to customize team level access, you'll also have the ability to customize company level access! 

❗Please note: Company Access is the highest level of access in GoCo. By enabling full access under any module, the user will have full access access for ALL team members (you will not be able to filter this by department/location).

To set up company access you'll first need to decide if you'd like the team member to have No Access (which is the default), Full Access (to all modules and team member information), or Custom. If you choose custom, you'll have the ability to adjust access types by modules:

Access Types:

1. No Access: Under this setting, the user(s) will not have any access to the modules.
2. Full Access: Under this setting, the user(s) will have full access to the module/add-on. This includes setting it up, disabling, adjusting policies, etc. For more detailed information, read below on the breakdown per module.
3. Custom: Under this setting, you have to configure No Access or Full Access by module.

Here are all the modules you can customize

1. ACA Compliance*:
   1. Full Access will grant the following permissions:
      1. ✅ Can view ACA compliance dashboard
      2. ✅ Can upload hours for all team members
      3. ✅ Can grant/revoke benefit eligibility for all team members
2. Benefits*: 
   1. Full Access will grant the following permissions:
      1. ✅ Can view benefit policies
      2. ✅ Can view Benefit Sync
      3. ✅ View and edit benefit enrollments for all team members
      4. ❌ Cannot edit benefit policies (email help@goco.io if you are trying to enable this)
3. Company Billing:
   1. Full Access will grant the following permissions:
      1. ✅ Can view invoices
      2. ✅ Can edit credit card / ACH information
      3. ✅ Can upgrade and add add-ons
4. Company Name, EIN, Address, Logo:
   1. Full Access will grant the following permissions:
      1. ✅ Can edit company name, business entity type, address, phone, domain, and logo
5. Company Permissions: this permission is only available to full-access admins (ie you cannot have company permissions set to "custom" and have the ability to toggle this module)
   1. Full Access will grant the following permissions:
      1. ✅ Can create, edit and delete roles
      2. ✅ Can edit permissions for all users
6. Custom Fields:
   1. Full Access will grant the following permissions:
      1. ✅ Can create, edit, and delete company-level custom fields
      2. ✅ Can edit custom fields for all team members
7. Divisions, Departments & Locations:
   1. Full Access will grant the following permissions:
      1. ✅ Can create, edit, and delete Divisions, Departments, and Locations
      2. ✅ Can assign Divisions, Departments, and Locations to all team members
8. Documents:
   1. Full Access will grant the following permissions:
      1. ✅ Can create, edit, and delete document templates
      2. ✅ Can send, view, verify, and delete documents for all team members
9. Execupay*: this permission is only available to full-access admins (ie you cannot have company permissions set to "custom" and have the ability to toggle this module)
   1. Full Access will grant the following permissions:
      1. ✅ Can view payroll data for all team members
      2. ✅ Has full access to Execupay
      3. ✅ Can start a payroll run through GoCo
      4. ✅ Can view paystubs on for all team members
10. Integrations:
    1. Full Access will grant the following permissions:
       1. ✅ Can enable and disable integrations with third-party software
11. Onboarding Tasks:
    1. Full Access will grant the following permissions:
       1. ✅ Can, create, edit and delete onboarding tasks
       2. ✅ Can assign onboarding tasks
12. Org Chart & Team Directory:
    1. Full Access will grant the following permissions:
       1. ✅ Can view all team members on the Org Chart
       2. ✅ Can view all team members on the Team page
       3. ✅ Can view name, email, phone number, title, department, location, and manager for all team members
13. Payroll Sync*:
    1. Can View will grant the following permissions:
       1. ✅ Can view payroll sync tasks & all payroll data
       2. ❌ Cannot close pay periods (email help@goco.io if you are trying to enable this)
       3. ❌ Cannot adjust payroll schedules (email help@goco.io if you are trying to enable this)
14. Reports:
    1. Full Access will grant the following permissions:
       1. ✅ Can create, edit, and delete custom reports
       2. ✅ Can view all report data for all team members
15. Team Feedback*:
    1. Full Access will grant the following permissions:
       1. ✅ Can view any non-private feedback for all team members
       2. ✅ Can leave feedback on any team member
16. Termination:
    1. Full Access will grant the following permissions:
       1. ✅ Can terminate any team member
       2. ✅ Can view and edit terminations on team members 
       3. ✅ Can customize, to limit view on termination details

1. Time Off*:
   1. Full Access will grant the following permissions:
      1. ✅ Can create, edit, and delete time off policies
      2. ✅ Add time off requests on behalf of all team members
      3. ✅ Adjust time off balances for all team members
      4. ✅ Approve and edit time off requests for all team members
2. Time Tracking*:
   1. Full Access will grant the following permissions:
      1. ✅ Can create, edit, and delete time tracking policies
      2. ✅ Can edit, approve, and export time-sheets
      3. ✅ Can clock in / clock out on behalf of all team members